/*  
  * Copyright (c) 2024 Beijing University of Posts and Telecommunications.  
  *  
  * Licensed under the Apache License, Version 2.0 (the "License");  
  * you may not use this file except in compliance with the License.  
  * You may obtain a copy of the License at  
  *  
  * http://www.apache.org/licenses/LICENSE-2.0  
  *  
  * Unless required by applicable law or agreed to in writing, software  
  * distributed under the License is distributed on an "AS IS" BASIS,  
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  
  * See the License for the specific language governing permissions and  
  * limitations under the License.  
  */

import "console"

rule CVE_2024_35789 {
	meta:
		date = "20240508"
		file = "/dev/block/platform/fe310000.sdhci/by-name/boot_linux"

	strings:
    $fix = {0? 1D 00 94}
    $unfix = {A4 1D 00 94}

    /* 4.1.3 版本特殊判断 */
    $s = {B4 34 00 94}
    

	condition:
		$fix and ( not $unfix or $s ) and console.log("CVE-2024-35789 pass")
}